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(54) Title: METHOD FOR CONTROLLING THE DELIVERY OF ELECTRONIC MAIL MESSAGES 
(57) Abstract 



The present disclosure discloses a method for controlling the 
delivery of electronic mail. The method comprises the steps of: 
creating an allowed list of electronic addresses with which the user 
is permitted to freely exchange messages; categorizing as authorized 
each message that is sent to or received from an entity whose 
address is included on the list (33, 34); categorizing as unauthorized 
each message that is sent to or received from an entity whose 
electronic address is not on the included list (33, 38); transmitting 
authorized outgoing messages to their intended recipients (34, 35, 36, 
37); allowing the user to access the content of authorized received 
messages. Also disclosed is a method for allowing an administrator 
to selectively approve messages which are sent to or received from 
entities whose electronic addresses do not appear on the allowed list 
(39, 40). 
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TITLE 

Method for Controlling the Delivery of Electronic Mail Messages 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates in general to communication between computers 
over the internet and in particular, to a method for controlling the delivery of electronic 
messages. 

2. Background Art 

As access to the internet has increased dramatically in recent years, almost 
anyone with a computer can communicate with other computer users to send and 
receive messages, to transfer files between computers and perform many other 
interactive processes. While the internet becomes increasingly integrated into modern 
society, it has remained and is expected to remain a largely uncensored medium for 
information exchange. 

In many households and classrooms children are being provided with access to 
personal computers, with younger and younger children encouraged to learn to use 
personal computers. Children are using computers to not only run stand-alone 
educational and entertainment application programs, but also to access information 
available on other computers and to send and receive electronic messages via the 
internet. In many cases children's use of such computers is unsupervised. While 
unsupervised use of a stand-alone computer program may be of little concern, the use 
of the computer to communicate with others over the internet is becoming an important 
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issue for many parents and guardians since the internet affords the child the opportunity 
to communicate with others unknown to the parent or guardian. 

Consequently, parents of younger children are often faced with the dilemma of 
whether or not to allow their children access to a computer which has a connection to 
5 the internet. While it is valuable for children to learn to use computers at an early stage 
in their lives, unrestricted communication with others over the internet can expose 
children to harmful or dangerous information and negative influences. 

Accordingly, while there is a need to allow children to become familiar with and 
use the many resources accessible over the internet, such as e-mail used to 
10 communicate with their peers, there is also a need to restrict communication with other 
unwanted persons. It is therefore an object of this invention to provide a method by 
which parents can allow their children to use a computer connected to the internet while 
simultaneously controlling the audience with whom the child communicates. 

It is a further object of the present invention to prevent an electronic message 
15 from being sent by a child to an intended recipient who has not been approved by a 
parent or guardian. 

It is another object of the present invention to prevent a child from reading an 
electronic message received from a sender who has not been approved by a parent or 
guardian. 

20 These and other objects of the present invention will become apparent in light the 

present specification and drawings. 
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SUMMARY OF THE INVENTION 

The present invention comprises a method for controlling the delivery of 
5 electronic messages sent to and sent by a user. The user's communications can be 
controlled by an administrator. The user referred to in the embodiment illustrated will 
generally be a child with the administrator commonly being the child's parent or 
guardian. 

The method utilizes a list of allowed electronic addresses with whom the user is 
10 permitted to freely exchange messages. Each message sent by or sent to the user will 
be categorized as either authorized if the other party to the communication appears on 
the allowed list, or unauthorized if the other party does not appear on the allowed list. 
Outgoing messages which are authorized will be transmitted to their destination, and 
incoming messages which are authorized can be opened and viewed by the user. 
15 Outgoing messages which are not authorized will not be transmitted, but rather will be 
held. The user will receive an indication that the administrator must approve the e-mail 
before it will be sent. Once the outgoing e-mail is approved it can be transmitted. 
Similarly, incoming e-mails which are not sent by an entity whose address appears in 
the list of allowed addresses, cannot be opened or read by the user. The user will be 
20 prompted to seek approval of the incoming message from the administer. Once the 

administrator approves the incoming message with a password, the user can then open 
and view the message contents. 

Specifically, the present invention comprises a method for controlling the delivery 
of electronic messages sent to and sent by a user. Specifically, the method comprises 
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the steps of: creating an allowed list comprised of electronic entity identifications with 
whom the user is permitted to freely exchange messages; categorizing as authorized 
each outgoing and incoming message that is sent to and received from an entity whose 
electronic identification is included on the allowed list; categorizing as unauthorized 

5 each outgoing and incoming message that is sent to and received from an entity whose 
electronic identification is not included in the allowed list; transmitting only authorized 
outgoing messages to their intended recipients; and allowing the user to access the 
contents of authorized received messages. A preferred embodiment of the present 
invention includes the further steps of: requesting authorization for each unauthorized 

10 incoming and outgoing messages; and authorizing the delivery or viewing of each 
message sent to or received from an electronic identification that does not appear on 
the allowed list. 

As discussed hereinbelow, these methods have applications to numerous 
situations and are only limited as indicated by the claims appended hereto. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
Figure 1 of the drawings is a block diagram illustration of the communication 
between a Client Email Terminal and an ISP Server, via the telephone network. 
5 Figure 2 of the drawings is an illustration of one embodiment of a client email 

terminal device screen display which allows an administrator to create, view and edit a 
list of allowed email addresses with whom the user may exchange email messages. 

Figure 3 of the drawings is a flowchart depicting one method of controlling the 
sending of outgoing email messages created by the user. 
iO Figure 4 of the drawings is a flowchart depicting an alternative embodiment of 

the method of controlling the sending of outgoing email messages from a client email 
terminal. 

Figure 5 of the drawings is a flowchart depicting one method of controlling the 
viewing of incoming email messages received by the user of the client email terminal. 
15 Figure 6 of the drawings is a flowchart depicting an alternative embodiment of the 

method of controlling the viewing of incoming email messages received by the user of 
the client email terminal. 

Figure 7 of the drawings is an illustration of a sample screen display of the email 
message composition screen. 
20 Figure 8 of the drawings is an illustration of a sample screen display of the 

approval of a message in the user's outbox. 

Figure 9 of the drawings is an illustration of a sample screen display of the 
user's outbox. 
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Figure 10 of the drawings is an illustration of a sample screen display of the 
user's inbox. 

Figure 1 1 of the drawings is an illustration of a sample screen display of the 
approval of a message in the user's inbox. 

5 
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DETAILED DESCRIPTION OF THE DRAWINGS 

While this invention is susceptible to embodiment in many forms, there is shown 
in the drawings and will herein be described in detail specific embodiments, with the 
5 understanding that the present disclosure is to be considered as an exemplification of 
the principles of the invention and is not intended to limit the invention to embodiments 
illustrated. 

The present invention comprises a method for controlling the delivery of 
electronic messages, commonly referred to as "email", sent from and received by a user 

10 using a client email terminal which is placed in momentary communication with an 
internet service provider ("ISP"). Client email terminal 10 is shown in Fig. 1 as 
communicating with ISP computer 12 via telephone network 11. ISP computer 12 
serves to route email messages between client email terminal 10 and other entities via 
the internet. While the user device is referred to herein as a client email terminal, such 

15 device can comprise virtually any single or multipurpose microprocessor based 
computing device capable of establishing communication with an ISP, including a 
personal computer. 

According to the present invention, the sending of email messages by a user and 
the viewing of email messages received by a user are controlled by an account 
20 administrator who establishes and maintains a list of allowed senders and recipients of 
email messages. The list may reside in a database within client email terminal 10 and 
in database 13 which is accessible to ISP computer 12. In the primary embodiment 
described herein, the user is typically a child having an email account established with 
the ISP and a corresponding email address. The account administrator is typically the 
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child's parent or guardian. However, the invention is not restricted to this application 
and, indeed, can be utilized wherever it is desired to provide a user with restricted 
access to computer network communication. 

The invention prevents communications between a user and entities who do not 
appear on an "allowed list." The allowed list is typically created by an account 
administrator and contains the identifications of entities with which the user is permitted 
to communicate freely. Figure 2 depicts a sample email terminal screen display 15 on 
which the administrator may view the content of the allowed list and add, delete and edit 
the identities of entities appearing on the allowed list. The embodiment of Figure 2 is 
directed specifically to email messaging, and the entity identifications are shown 
consisting of email addresses containing the now well known "@" symbol. However, 
electronic entity identifications can include any identifying means by which another party 
can be communicated with. For example, electronic identity identifications may also 
include web site Universal Resource Locations for communications in a web-based 
system, or TCP/IP addresses used in, for example, video conferencing 
communications. 

Screen display 15 illustrates the user interface for adding, deleting and editing 
email addresses. In the example illustrated, the list 16 of allowed addresses comprises 
123 names as indicated by counter 19. The adding or editing of email addresses is 
performed via dialog box 17. The allowed list may be selectively enabled and disabled 
by software switch 18. 

In the present invention it may be desirable to have shorthand or "nicknames" 
appear on the allowed list as opposed to the conventional email addresses. This may 
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be particularly convenient for children and parents alike given a child's likelihood to 
adopt an email nickname as a substitute for the child's given name. 

Figure 3 contains a flow chart illustrating the various steps which comprise the 
method of one embodiment of the invention. Specifically, the method prevents a user 
5 from sending an email message to a recipient whose email address does not appear on 
the allowed list. The method uses as a metaphor multiple outboxes for holding email 
messages to be sent to their intended recipients where one outbox consists of 
messages directed to recipients appearing on the allowed list, and another outbox 
consists of messages whose recipients are not on the allowed list. 
10 The process of sending an email message 30 begins with the user composing 

the email message, step 31 . A sample screen display illustrating the user interface 
provided to compose an email message is shown in Fig. 7. Once the user has 
completed composing an email message it may be saved as a draft for later editing or it 
may be designated as ready to be sent. Once designated as ready for sending, the 
is identity of each recipient of the email message prepared by the user is compared to the 
allowed list, step 32. If the all of the recipients are on the allowed list, step 33, the email 
message is placed in the normal mail outbox, step 34. When the next connection with 
the ISP is made, step 35, all messages in the normal mail outbox are sent onto the 
internet, step 37. 

20 If, however, when performing the comparison between each named recipient and 

the contents of the allowed list it is determined that not all recipients are in fact on the 
allowed list, step 33, then the email message is placed in an alternate outbox 
designated for messages that require administrator approval before being sent, step 38. 
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If an email message is approved by the administrator, step 40, the email is moved to the 
normal outbox, step 34, for sending upon the next connection to the ISP. If the email 
however is not approved by the administrator, it will remain in the outbox for emails 
needing approval and will be erased after a predetermined amount of time if no 
approval has been granted, step 41 . The process of administrator approval typically 
involves an administrator entering some type of password or authentication code. A 
sample email terminal screen display of the administrator approval step 40 appears in 
Figure 8. 

The foregoing steps depict a process performed by one embodiment of the 
present invention. Given that the process is performed by software resident within the 
email terminal and ISP server, it is understood that steps may be consolidated or 
expanded without departing from the scope of the present invention. 

In another embodiment of the invention, as illustrated in Fig. 4, an outgoing 
message may not be "moved" from one "outbox" to another, but instead may "reside" 
within a single outbox or database list with each message therein having a status flag 
set or not set to indicate whether each message is approved or not. A sample email 
terminal screen display of such an outbox appears in Figure 9. In this embodiment, an 
outgoing message is prepared by the user, step 71, as depicted in the email terminal 
screen display of Figure 7. Thereafter, the recipients of the outgoing message are 
compared to the identities appearing on the allowed list, step 72, and a determination is 
made whether each designated recipient is on the list, step 73. If all are on the allowed 
list, the message is designated as approved, step 74. If any recipients are determined 
not to be on the allowed list the outgoing message is designated as needing approval, 
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step 75. Messages requiring approval appear in the outbox of Figure 9 marked with 
icon 101 , consisting of a circle with a slash through it, to the left of the message date. If 
approval for a message is thereafter given by the account administrator in step 76, the 
administrator is further given the option, step 78, to add the approved recipient to the 
allowed list such that subsequent messages to the recipient will not require 
administrator action, step 79. Whether or not a recipient is added to the allowed list, the 
message is designated as approved, step 74, and the icon marking the message in the 
outbox changes to half-filled circle 102, indicating to the user that approval is no longer 
required. If no approval is given in step 76, messages designated as needing approval 
are deleted at predetermined intervals, step 77. When the email terminal is connected 
to the ISP, all messages designated as approved are transmitted to the ISP and sent to 
the intended recipients, step 80. 

Fig. 5 of the drawings illustrates the method of the present invention by which a 
user receives incoming email messages. As before, a metaphor of multiple incoming 
email boxes is adopted. In the present invention, all email messages addressed to the 
user are transferred by the ISP to the user's email terminal each time the terminal is 
connected to the ISP server, step 51 . The identity of the sender of each incoming email 
message is compared to identities appearing on the allowed list, step 52. If the sender 
is determined to be in the allowed list, step 53, the incoming message is designated as 
a message which does not require approval, step 54, and is in turn, placed in the 
normal mail inbox, step 55. If the identity of the sender of an email is determined to not 
appear on the allowed list, step 53, the incoming message is designated as a message 
which requires approval, step 57, and is placed in the inbox for messages requiring 
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approval, step 58. An administrator thereafter may approve each such message, step 
59. Figure 1 1 depicts a sample email terminal screen display of administrator approval 
step 59. If approval is granted, step 60, the email message is placed in the normal 
inbox, step 55. If approval is not given, step 60, the message will be deleted after a 
5 predetermined amount of time, step 61 . 

The foregoing steps depict a process performed by one embodiment of the 
present invention. Given that the process is performed by software resident within the 
email terminal, it is understood that steps may be consolidated or expanded without 
departing from the scope of the present invention. 
io In another embodiment of the invention, as illustrated in Fig. 6, an incoming 

message is not "moved" from one "outbox" to another, but instead may "reside" within a 
single inbox or database list with each message therein having a status flag set or not 
set to indicate whether each message is approved for viewing by the user or not, as 
described for steps 84 and 86 below. 
15 Figure 10 depicts a sample email terminal display of such an inbox. In this 

embodiment all incoming messages addressed to the user are received by the user's 
email terminal, step 81 . Thereafter, the sender of each incoming message is compared 
to the identities appearing on the allowed list, step 82, and a determination is made 
whether the sender is on the list, step 83. If the sender is on the allowed list the 
20 message is designated as approved for viewing by the user, step 84, and marked with 
half-filled circle icon 110, indicating that the message remains unread. If a sender is 
determined not to be on the allowed list the incoming message is designated as 
needing approval for viewing, step 85. A message requiring approval is marked with 
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the circle with slash icon 111 in the inbox of Figure 10. If approval is thereafter given by 
the account administrator in step 87, the administrator is further given the option in step 
89 to add the message sender to the allowed list, step 90, such that subsequently 
received messages from the sender will not require administrator approval. Whether or 
not the sender is added to the allowed list, the incoming message is designated as 
approved for viewing, step 84, and the inbox marking icon is changed to a half-filled 
circle. If no approval is given by the administrator, messages designated as needing 
approval for viewing are deleted at predetermined intervals in step 88. Incoming email 
messages designated as approved for viewing are thus able to be viewed by the user. 

As an alternative to the foregoing embodiment of the present invention, the 
comparison between the sender's address and the allowed list may be performed by the 
ISP computer instead of by the client email terminal. In such an embodiment, only 
those email messages from senders whose addresses appear on the allowed list 
maintained by the ISP computer are communicated to the client email terminal. Such 
an embodiment has the advantage of off-loading the processing overhead incurred in 
making the comparisons to the ISP's computers, which tend to be substantially more 
powerful and able to handle the processing tasks. 

A requisite component of such an alternative embodiment requires that a copy of 
the current allowed list for each client email terminal user be maintained on the ISP 
computer system. Accordingly, a copy of the allowed list maintained on the client 
computer is transferred to the ISP computer during each session where the client email 
terminal is connected to the ISP computer so that the ISP computer is always 
synchronized with the client's allowed list. 
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In another embodiment in which the allowed list is maintained on both the client 
email terminal and the ISP, the client email terminal transmits changes that have been 
made to the client allowed list since the previous ISP connection. The ISP also 
transmits changes that have been made to the ISP allowed list since the previous 
connection. Such an embodiment allows changes to be made by either side. This 
embodiment can be advantageous if the ISP establishes an internet web site that an 
administrator can utilize to remotely control the allowed list, as well as previously- 
described control at the client email terminal. For example, a parent at work can use 
any computer with internet access to add, delete, or change the list people with whom 
their child can communicate. Those changes would become effective as soon as the 
child connects with the ISP. 

The foregoing description and drawings merely explain and illustrate the 
invention and the invention is not limited thereto except insofar as the appended claims 
are so limited, as those skilled in the art who have the disclosure before them will be 
able to make modifications or variations therein without departing from the scope of the 
invention. 
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I claim: 

1 . A method for controlling the delivery of electronic messages sent to and sent by 
a user, said method comprising the following steps: 

• creating an allowed list comprised of electronic entity identifications with 
whom the user is permitted to freely exchange messages; 

• categorizing as authorized each outgoing and incoming message that is 
sent to and received from an entity whose electronic identification is 
included on the allowed list; 

• categorizing as unauthorized each outgoing and incoming message that is 
sent to and received from an entity whose electronic identification is not 
included in the allowed list; 

• transmitting only authorized outgoing messages to their intended 
recipients; 

• allowing the user to access the contents of authorized received messages; 

2. The method of claim 1 , which method further includes the following substeps: 

• requesting authorization for each unauthorized incoming and outgoing 
messages; 

• authorizing the delivery or viewing of each message sent to or received 
from an electronic identification that does not appear on the allowed list. 
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3. A method for permitting an administrator to control reception of electronic 
messages by a user of a client terminal, which client terminal connects to a computer 
network through a service provider, the method consisting of the following steps: 

• creating an allowed list of electronic entity identifications from which the 
5 user is permitted to receive messages; 

• receiving at the service provider one or more electronic messages 
addressed to the user; 

• establishing a communications link between the service provider and the 
client; 

io • determining for each of the electronic messages addressed to the user 

whether or not the sender's electronic identification appears in the allowed 
list; 

• transmitting all messages to the client computer; 

• allowing the user to display the contents of each message received from 
is an entity whose electronic identification appears in the allowed list; 

• preventing the user from displaying the contents of each message 
rece j ve< j f rom a n entity whose electronic identification does not appear in 
the allowed list. 

• 

4. The method of claim 3, in which the step of determining whether or not the 
sender's electronic identification appears in the allowed list is performed by the service 
provider. 
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5. The method of claim 3 f in which the step of determining whether or not the 
sender's electronic identification appears in the allowed list is performed by the client 
terminal. 

6. The method of claim 3, which method further includes the following steps: 

• authorizing the reception of a message from a sender whose electronic 
identification does not appear in the allowed list; 

• allowing the user to display the contents of the authorized message. 

7. A method for permitting an administrator to control the transmission of electronic 
messages by a user of a client terminal, which client terminal connects to a computer 
network through a service provider, the method consisting of the following steps: 

• creating an allowed list of electronic entity identifications to which the user 
is permitted to transmit messages; 

• generating one or more outgoing electronic messages for transmission to 
a destination electronic entity identification; 

• establishing a communications link between the service provider and the 
client; 

• determining for each of the outgoing electronic messages whether or not 
the message's destination identification appears in the allowed list; 

• transmitting all messages directed to a destination identification which 
appears in the allowed list; 
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8. The method of claim 7, in which the step of determining whether or not the 
destination identification appears in the allowed list is performed by the service provider. 



9. The method of claim 7, in which the step of determining whether or not the 
destination identification appears in the allowed list is performed by the client. 

1 0. The method of claim 7, which method further includes the following steps: 

• authorizing the transmission of a message to a destination identification 
that does not appear in the allowed list; 

• transmitting the authorized message. 

11. A method for permitting an administrator to control the transmission of an 
electronic message from a user's computer to an electronic destination identification, 
which method is comprised of the following steps: 

• creating an allowed list of electronic entity identifications to which the user 
is permitted to transmit messages; 

• generating an electronic message; 

• determining whether or not the message's destination electronic 
identification appears in the allowed list; 

• transmitting the message if its destination electronic identification appears 
in the allowed list. 

• 

1 2. The method of claim 1 1 , further including the subsequent steps of: 
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• authorizing the transmission of a message to a destination identification 
that does not appear in the allowed list; 

• transmitting the authorized message. 

13. A method for permitting an administrator to control the reception of electronic 
messages by a user's computer from a sender's computer, which method is comprised 
of the following steps: 

• creating an allowed list of electronic entity identifications from which the 
user is permitted to receive messages; 

• receiving an electronic message; 

• determining whether or not the electronic entity identification of the 
message sender appears in the allowed list; 

• permitting the user to access the contents of the message only if the 
sender's electronic identification appears in the allowed list; 



14. The method of claim 13, further including the steps of: 

• authorizing the message received from a sender whose electronic 
identification does not appear in the allowed list; 

• permitting the user to access the contents of the authorized message. 
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